Hi, i have an issue where my azure function files are removed when i run my pulumi stack for the given function; The only change is lastModefied . client-function-dev (azure-nativewebWebApp) ~ azure-nativewebWebApp (update) lastModifiedTimeUtc : "2022-09-16T074438.1033333" => "2022-09-19T143649.5033333"

Is it possible to self reference a resource? I.e. say I wanted to use some of the info of an application registration in its creation, like so:

const appReg = new azuread.Application("app", {
   displayName: "name",
   identifierUris: [`${baseUrl}/${self.applicationId}`]
})

Would something like

self.applicationId

be possible?

Hello Pulumi community, Im creating DNS records and zones using pulumi cloudflare provider, im getting an issue when trying to get the zone Id output as an input for my record creation, something very simple like

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		conf := config.New(ctx, "")
		accountID := conf.Require("accountId")
		
		zone, err := cloudflare.NewZone(ctx, "<http://zone.io|zone.io>", &cloudflare.ZoneArgs{
			AccountId: pulumi.String(accountID),
			Plan:      pulumi.String("free"),
			Zone:      pulumi.String("<http://zone.io|zone.io>"),
		}, pulumi.Protect(true))
		if err != nil {
			return err
		}
		_, err := cloudflare.NewRecord(ctx, "test_record", &cloudflare.RecordArgs{
			ZoneId: zone.Id,
			Name:    pulumi.String("test"),
			Value:   pulumi.String("0.0.0.0"),
			Type:    pulumi.String("A"),
			Ttl:     <http://pulumi.Int|pulumi.Int>(1),
			Proxied: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		return nil
	})

}

Im constantly getting the error

./main.go:56:21: zone.Id undefined (type *cloudflare.Zone has no field or method Id)

But as per provider documentation the Id output actually exists and if I change Zone.Id for another output like zone.Status it works , Could this be a provider bug or am I doing something wrong?

Hi, Can someone tell me why

pulumi destroy

fails to remove ecr repo? It gives an error indicating the repo is not empty. I am trying to delete the repo as well as the images with

pulumi destroy

command. This code that creates the ecr image:

const imageUrl = pulumi.output(
            awsx.ecr.buildAndPushImage('my-image', {
                context: './',
                dockerfile: './Dockerfile.track',
            }).imageValue
          ) as pulumi.Output<string>

is there a way to update the stack config without running

pulumi up

. sort of like a reverse

pulumi config refresh

or something like what

pulumi config set --update-state foo bar

would do if it were a real command?

Hello everybody, i have a small issue deploying a helm chart to kubernetes and changing some config values. According to the helm chart documentation default components can be removed setting them to

null

. I have tried several ways to set the config to

null

but I cant manage to do it and then the default config is used. Is this somehow possible?

_, err := s.NewChartRelease(otelCollectorChart, namespace.Metadata.Elem().Name(), pulumi.Map{
        "fullnameOverride": pulumi.String("otel-collector"),
        "mode":             pulumi.String("deployment"),
        "config": pulumi.Map{
            "receivers": pulumi.Map{
                "prometheus": nil,
            }}})

In this example I want to set the "prometheus" config to null

👋 Hi everyone! I am new to pulumi, I just got introduced to it today, and I have this issue that I've been stuck with for python and gcp, apologies if it's really newbie the question, but how to fix this error, studying this source code from youtuber ArjanCodes: https://github.com/ArjanCodes/2022-pulumi/tree/main/cloud_func:

Type                                      Name               Plan       Info
 +   pulumi:pulumi:Stack                       cloud_func-dev     create
 +   ├─ gcp:storage:Bucket                     cf_demo_bucket     create
 +   ├─ gcp:storage:BucketObject               eta_demo_object    create
     └─ gcp:cloudfunctions/functions:Function  eta_demo_function             1 error
 
Diagnostics:
  gcp:cloudfunctions/functions:Function (eta_demo_function):
    error: unrecognized resource type (Check): gcp:cloudfunctions/functions:Function

Hello! Is it possible to write unit tests to validate that IgnoreChanges is working correctly?

Hello All., How can you ignore_changes to a specific image tag in the task def of a ecs service with pulumi?

👋 Hi everyone! I am new to pulumi, I just started playing with it by converting the existing terraform templates into go. I am facing some random issue while converting

tf2pulumi --target-language go
error: rpc error: code = Unimplemented desc = GetSchema is not yet implemented

Hi, I am new to pulumi, I have question, when I use console to add policy for role , there are some built-in defined policies had provided by aws, I want to when I use pulumi how to import and use this same built-in defined policies?

Hey guys, I’m implementing GCP KMS in my pulumi project and im having a hard time understanding how it will work since I’m creating the key from pulumi but also im supposed to use the key (that is yet to be created) in my stack config file. From my understanding, this seems like something that wouldnt be able to be done in one shot but would require a

pulumi up

command to create the key followed by a

pulumi stack change-secrets-provider

, am i understanding that correctly?

Hi, I am evaluating Pulumi for our projects. I'd like to find a best practice on how to add Tags for existing subnet? Any suggestion? Here is the code that cannot work properly.

(async () => {
    publicSubnets = await vpc.publicSubnets;
    publicSubnets.forEach(
        sub => {
            // console.log(sub.id);
            new aws.ec2.Tag('',{
               resourceId: sub.id,
               key: '<http://kubernetes.io/role/elb|kubernetes.io/role/elb>',
               value: '1'
            });
        }
    );
})();

I’m trying to do something similar to this example, which illustrates how to use the Azure SDK to fetch data that can’t be queried through the Pulumi resource model. When I unit test my code, I can intercept the

authorization.GetClientConfig

call, as that is a provider function on the azure-native provider. That is, it can be handled in the

Call()

function as defined in the unit testing documentation. The code I have for calling the Azure SDK is in an ApplyT. Is it possible to intercept this as well, and specify the return value in a similar way as with the provider functions, or will I have to handle this by creating an interface I can mock?

has anyone else been having issues with `refresh: "always"`option after the latest version upgrade? I’m getting the following error in my projects with this config:

error: could not get cloud url: could not load current project: 1 error occurred:
	* #/options/refresh: expected boolean, but got string

HI. Has anyone ever managed to deploy a helm release with OCI repository using Pulumi?

Hello, I am reviewing: https://www.pulumi.com/registry/packages/aws/api-docs/cloudwatch/eventtarget/ based on this documentation, we need an arn parameter and the documentation specifies

ARN of the SQS queue specified as the target for the dead-letter queue.

. However, I am trying to set it as a ECS target and I'm a bit confused as to if the documentation is wrong or if I really need a SQS DQL for an ECS target? Any advice would be great. thanks!

I'm trying to write a Resource Validation Policy for a bunch of Artifactory repositories (https://www.pulumi.com/registry/packages/artifactory/api-docs/) Many repository types have a boolean property that I'd like to ensure is always

true

whenever I create one of these repositories (in particular, the

xray_index

property: https://www.pulumi.com/registry/packages/artifactory/api-docs/localgenericrepository/#xray_index_python). I know that I can explicitly check the type of the resource first and then see if the property is set:

if args.resource_type in ["artifactory:index/localGenericRepository:LocalGenericRepository", ...]:
  if not args.props.get("xrayIndex"):
    report_violation(...)

However, I was wondering if it would instead be possible to just see if the resource had an

xrayIndex

property (without listing out all the resource types explicitly). However, it only appears that I have access to whatever properties happen to have been set on the concrete resource. Since this particular boolean property defaults to

false

, this makes any resources that are in violation "invisible" to this kind of checking logic. Is there any way in a policy to see all the possible properties a resource could have, rather than just the ones that have been set on any given instance? After typing this out, I think I may end up sticking with the more explicit approach, but now I'm curious 😅

Have any of you run into an issue where you use Pulumi to create a GCP project, and it succeeds, but Pulumi hangs forever. Then if you cancel it, on restart, it complains that the project already exists. How do I work around that?

We'd like to use the official PostgreSQL provider targeting a PG instance within a Kubernetes cluster -- an instance which itself is managed with the Pulumi Kubernetes provider. We'd like to use on-the-fly Kubernetes port forwarding for such a scenario. How would one go about doing this within the same stack? • We're exploring creating a custom provider "based on" the existing one. In simplistic OOP terms we'd "override"/wrap provider methods to set up the port forwarding before the "base class" call and tear it down afterwards. We're using TypeScript. However, it's unclear if there is any SDK to target another resource provider directly, or if the relevant gRPC interface is meant to be used for any other client than the Pulumi engine. • We could use different stacks and leverage the Pulumi automation API (we're already using it for many other scenarios). However in this case this stack boundary doesn't feel right/natural in our architecture. Do you think the scenario is common enough to be addressed in the way we want (one stack), or should we work harder to prove ourselves wrong on this point (justify multiple stacks)? • We could open up direct/public access to the PG instance. It's likely possible to do it sufficiently safely but again it doesn't feel like we'd be doing it for the right reasons. Could we be wrong about that? Thanks for reading, any input/opinions would be greatly appreciated.

Does this error mean anything to you?

> $ pulumi new                                                                                                                                                                                          error: could not get cloud url: could not load current project: 1 error occurred:
	* #/config: expected string or null, but got object

I upgraded pulumi and switched to a new network. Any suggestiosn?

Looking to create a DNS record on my domain controller (inside an azure VM) for one of my created resources in my Pulumi stack. Anyone have experience doing this?

I have a scenario whereby I would like to distinguish my resources per "environment" but also have a stack per set of resources. I was thinking of the following structures •

my-{pre-prod or prod}-project/{resource-collection}-1

•

my-project/{pre-prod or prod}-{resource-collection}-1

Anyone have any views on this they don't mind sharing?

Hey guys. Is there a way how I can turn on canary deployments in ecs using pulumi python?

Is there a way to programmatically delete a resource on the stack? For example, I want to spin up and EC2 instance, do some computation and delete this instance when I'm done.

ive got a resource that depends on a s3-bucketobject, but when the s3 bucket object changes its content, the resource that depends on it doesnt update. is there a way of fixing that?

Hi, I'm using Pulumi GitHub Actions during the CI workflow. Recently I wanted to debug an issue and found out that the action doesn't produce any output in the GHA workflow log (see the screenshot). The

pulumi/actions@v3

parameters are as follows:

with:
    command: up
    refresh: true
    stack-name: ***
    work-dir: infra
    cloud-url: s3://***
    comment-on-pr: false
    github-token: ***
    parallel: 2147483647
    target-dependents: false
    upsert: false
    edit-pr-comment: true
    pulumi-version: ^3
    color: auto
  env:
    AWS_DEFAULT_REGION: ***
    AWS_REGION: ***
    AWS_ACCESS_KEY_ID: ***
    AWS_SECRET_ACCESS_KEY: ***
    AWS_SESSION_TOKEN: ***
    pythonLocation: /opt/hostedtoolcache/Python/3.8.13/x64
    PKG_CONFIG_PATH: /opt/hostedtoolcache/Python/3.8.13/x64/lib/pkgconfig
    Python_ROOT_DIR: /opt/hostedtoolcache/Python/3.8.13/x64
    Python2_ROOT_DIR: /opt/hostedtoolcache/Python/3.8.13/x64
    Python3_ROOT_DIR: /opt/hostedtoolcache/Python/3.8.13/x64
    LD_LIBRARY_PATH: /opt/hostedtoolcache/Python/3.8.13/x64/lib
    PULUMI_CONFIG_PASSPHRASE: ***

I was able to track this down to happen somewhere between Pulumi CLI v3.39.1 (produces output) and v3.39.3 (doesn't produce output). I looked at release notes (https://github.com/pulumi/pulumi/releases) but couldn't find anything relevant. It happens both for Pulumi programs written in Python and TypeScript, if that is important. Anyone has a clue what to try next?

I’m seeing an issue where, if we get an error from upstream (Google Cloud Platform in this case), the resource we’re trying to create isn’t fully added to our stack. There’s a reference to the resource in the stack, but it seems incomplete, presumably because creation didn’t complete. We’re creating Cloud SQL instances, and we add a randomized suffix to the name to avoid collisions, and the effect that we’re seeing is that we create a new Cloud SQL instance on the next attempt at upping the stack. What’s the recommended way to deal with this error mode?

When issuing

pulumi stack init

on an existing stack, is there a way to ignore the fact that it already exists? Use case: Looking at a way to create stacks on the fly without needing to do a lookup of sorts before issuing an

init

.

Suppose I want to re-execute a

local.Command

every time a set of files on the local filesystem changes. I think this is the use of the

triggers

argument to

local.Command

, but am wondering what the best thing to pass here is. It is a hash of the files that I construct myself? I was hoping Pulumi would have something here, but the asset and archive classes for instance don't appear to expose any methods or paths in that vein. All suggestions welcome!